Vendor
GitLab
1,178 known vulnerabilities.
Products
GitLab 1,112
GitLab CE/EE 22
GitLab Community and Enterprise Editions 13
GitLab EE 10
GitLab Runner 6
GitLab AI Gateway 4
DAST 2
gitlab-vscode-extension 2
GitLab Community Edition 2
GitLab Enterprise Edition 2
gitlab-shell 2
GitLab DAST API scanner 1
GitLab Language Server 1
GitLab Pages 1
GitLab Community Edition and GitLab Enterprise Edition 1
GitLab VSCode Fork 1
Gitaly 1
DAST API scanner 1
Community Edition and Enterprise Edition 0
Community Edition, Enterprise Edition 0
Enterprise Edition 0
186 results · Clear filters · Feed
-
Low 3.1
An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.4.5, all versions starting f…
-
Low 3.5
An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting …
-
Low 3.1
An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, a…
-
Low 2.7
An issue has been discovered in GitLab EE affecting all versions starting from 12.2 prior to 14.10.5, 15.0 prior to 15.…
-
Low 3.1
Improper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 1…
-
Low 2.6
An information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 1…
-
Low 2.7
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 14.9.5, all versions star…
-
Low 2.0
An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting f…
-
Low 2.6
An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting f…
-
Low 2.6
Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior…
-
Low 2.4
A business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2, 14.8 prior to 14.8.5, and 14.0 …
-
Low 3.7
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions star…
-
Low 3.1
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.2 before 14.7.7, all versions star…
-
Low 3.1
Incorrect authorization in the Asana integration's branch restriction feature in all versions of GitLab CE/EE starting …
-
Low 3.5
An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a D…
-
Low 3.5
An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trig…
-
Low 3.1
A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since r…
-
Low 3.1
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting f…
-
Low 3.5
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 a…
-
Low 3.5
Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and…
-
Low 3.7
An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 all…
-
Low 3.1
A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14…
-
Low 3.5
Improper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6, all versions starting …
-
Low 3.1
An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions star…
-
Low 2.7
Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions st…
-
Low 3.1
Incorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all versions starting fro…
-
Low 2.6
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14.3.6, all versions star…
-
Low 3.1
It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 …
-
Low 3.7
In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may a…
-
Low 1.7
An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting…
-
Low 2.7
In all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token of that group by visiti…
-
Low 2.6
Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a proj…
-
Low 3.1
A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause…
-
Low 3.5
In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client appl…
-
Low 2.6
Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starti…
-
Low 2.9
In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s passwo…
-
Low 2.0
Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in …
-
Low 3.8
In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersona…
-
Low 2.2
Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim'…
-
Low 3.1
Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a rep…